Description

Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle Database server 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB27. NOTE: Oracle has not disputed a reliable researcher report that TDA stores the master key without encryption, which allows local users to obtain the key via the SGA.

Remediation

References

CVE-2006-0270

Related Vulnerabilities

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Cross-Site Scripting (2.6.5)

MyBB Other Vulnerability (CVE-2007-2212)

WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.13)

WordPress Plugin LittleBot ACH for Stripe + Plaid Unspecified Vulnerability (1.2.6)

Oracle JRE CVE-2018-2588 Vulnerability (CVE-2018-2588)

Severity

Critical

Classification

CVE-2006-0270

Tags

Missing Update Known Vulnerabilities